Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 23:54:52.128 00:05:52.891 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-15 23:55:43.102 00:05:01.917 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-15 23:55:45.097 00:05:07.011 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-15 23:56:43.356 00:05:01.662 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-15 23:56:40.976 00:05:10.573 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2320 1 2025-10-15 23:57:45.096 00:05:57.986 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-15 23:57:51.865 00:05:53.202 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-15 23:58:43.336 00:05:01.711 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 00:03:10.960 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:03:10.950 00:00:00.025 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:03:10.982 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:03:11.031 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:03:10.951 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 00:03:10.750 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-15 23:58:51.883 00:05:53.158 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-15 23:59:42.357 00:05:02.663 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 00:00:52.127 00:05:52.916 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 00:01:43.102 00:05:01.941 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 00:01:45.099 00:05:07.011 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 00:02:00.983 00:05:10.005 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2692 1 2025-10-16 00:02:43.361 00:05:01.688 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 00:08:11.232 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 00:08:11.232 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 00:08:11.265 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:08:11.313 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:08:11.443 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:08:11.385 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:03:45.108 00:05:57.977 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 00:04:43.340 00:05:01.730 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 00:03:51.864 00:05:53.226 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 00:04:51.884 00:05:53.165 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 00:05:42.363 00:05:02.686 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 00:07:20.987 00:05:10.009 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2532 1 2025-10-16 00:06:52.128 00:05:52.928 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 00:07:43.103 00:05:01.953 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 00:07:45.128 00:05:06.983 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 00:08:43.364 00:05:01.690 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 00:13:11.331 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 00:13:11.415 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 00:13:11.627 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:13:11.413 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:13:11.420 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:13:11.413 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:09:45.130 00:05:57.956 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 00:09:51.865 00:05:53.230 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 00:10:43.344 00:05:01.731 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 00:10:51.885 00:05:53.169 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 00:11:42.363 00:05:02.691 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 00:12:40.996 00:05:00.783 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2596 1 2025-10-16 00:12:52.131 00:05:52.924 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 00:13:43.105 00:05:01.950 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 00:13:45.133 00:05:06.987 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 00:18:10.998 00:00:00.049 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 00:18:11.295 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 00:18:11.209 00:00:00.049 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:18:11.322 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:18:11.331 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:18:11.376 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:14:43.366 00:05:01.689 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 00:15:45.135 00:05:57.953 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 00:16:43.346 00:05:01.729 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 00:15:51.871 00:05:53.224 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 00:16:51.892 00:05:53.163 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 00:17:42.364 00:05:02.691 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 00:17:51.004 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 35 2400 1 2025-10-16 00:23:12.389 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 00:23:12.439 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 00:23:12.649 00:00:00.024 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:23:12.648 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:23:12.525 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:23:12.469 00:00:00.023 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:18:52.141 00:05:52.914 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 00:19:43.107 00:05:01.948 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 00:19:45.136 00:05:06.986 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 00:20:43.369 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 00:21:45.136 00:05:57.953 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 00:22:43.348 00:05:01.734 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 00:21:51.872 00:05:53.230 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 00:23:11.014 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 34 2376 1 2025-10-16 00:22:51.895 00:05:53.168 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 00:23:42.373 00:05:02.690 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 00:28:11.467 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 00:28:11.521 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 00:28:11.731 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:28:11.724 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:28:11.697 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:28:11.547 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:24:52.142 00:05:52.922 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 00:25:43.107 00:05:01.957 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 00:25:45.144 00:05:06.988 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 00:26:43.371 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 00:27:45.143 00:05:57.950 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 00:28:31.019 00:05:10.036 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2572 1 2025-10-16 00:28:43.351 00:05:01.734 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 00:27:51.876 00:05:53.229 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 00:33:11.560 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:33:11.598 00:00:00.020 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:33:11.741 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:33:11.378 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:33:11.386 00:00:00.022 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 00:33:11.480 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 00:28:51.896 00:05:53.169 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 00:29:42.375 00:05:02.690 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 00:30:52.152 00:05:52.914 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 00:31:43.112 00:05:01.954 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 00:31:45.145 00:05:06.987 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 00:32:43.373 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 00:33:51.055 00:05:10.001 OSPF 27.0.10.2:0 -> 224.0.0.5:0 36 2572 1 2025-10-16 00:38:11.780 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:38:11.855 00:00:00.023 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:38:11.558 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:38:11.780 00:00:00.021 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:38:11.699 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 00:38:11.569 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 00:33:45.146 00:05:57.952 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 00:34:43.353 00:05:01.734 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 00:33:51.878 00:05:53.229 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 00:34:51.898 00:05:53.169 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 00:35:42.376 00:05:02.691 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 00:36:52.153 00:05:52.914 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 00:37:43.118 00:05:01.949 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 00:37:45.146 00:05:06.987 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 00:38:43.374 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 00:43:12.103 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:43:12.098 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:43:11.859 00:00:00.022 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:43:12.053 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:43:11.972 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 00:43:11.892 00:00:00.021 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 00:39:11.057 00:05:10.004 OSPF 27.0.10.2:0 -> 224.0.0.5:0 37 2608 1 2025-10-16 00:39:45.146 00:05:57.954 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 00:40:43.354 00:05:01.736 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 00:39:51.878 00:05:53.232 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 00:40:51.900 00:05:53.172 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 00:41:42.377 00:05:02.695 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 00:42:52.152 00:05:52.919 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 00:43:43.120 00:05:01.951 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 00:43:45.148 00:05:06.987 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 00:48:11.932 00:00:00.021 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:48:12.008 00:00:00.022 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:48:11.877 00:00:00.026 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:48:11.798 00:00:00.024 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:48:11.718 00:00:00.024 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 00:48:11.718 00:00:00.024 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 00:44:31.036 00:05:10.032 OSPF 27.0.10.2:0 -> 224.0.0.5:0 38 2740 1 2025-10-16 00:44:43.377 00:05:01.694 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 00:45:45.150 00:05:57.952 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 00:46:43.357 00:05:01.735 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 00:45:51.880 00:05:53.232 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 00:46:51.902 00:05:53.170 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 00:47:42.379 00:05:02.693 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 00:53:12.182 00:00:00.023 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:53:11.852 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:53:12.247 00:00:00.021 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:53:11.737 00:00:00.022 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:53:11.656 00:00:00.022 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 00:53:11.971 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 2025-10-16 00:48:52.156 00:05:52.916 TCP 27.156.0.1:179 -> 27.157.0.1:38169 12 738 1 2025-10-16 00:49:43.121 00:05:01.951 TCP 27.156.0.1:179 -> 27.158.0.1:40177 12 738 1 2025-10-16 00:49:45.152 00:05:06.985 TCP 27.157.0.1:38169 -> 27.156.0.1:179 12 738 1 2025-10-16 00:49:51.067 00:05:10.008 OSPF 27.0.10.2:0 -> 224.0.0.5:0 33 2296 1 2025-10-16 00:50:43.379 00:05:01.693 TCP 27.156.0.1:35159 -> 27.154.0.1:179 12 738 1 2025-10-16 00:51:45.152 00:05:57.951 TCP 27.158.0.1:40177 -> 27.156.0.1:179 12 738 1 2025-10-16 00:52:43.359 00:05:01.734 TCP 27.154.0.1:179 -> 27.156.0.1:35159 12 738 1 2025-10-16 00:51:51.884 00:05:53.229 TCP 27.153.0.1:179 -> 27.156.0.1:34437 12 738 1 2025-10-16 00:52:51.903 00:05:53.168 TCP 27.156.0.1:34437 -> 27.153.0.1:179 12 738 1 2025-10-16 00:53:42.378 00:05:02.693 TCP 27.156.0.1:179 -> 27.151.0.1:36165 12 738 1 2025-10-16 00:58:12.362 00:00:00.021 ICMP 32.102.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:58:12.245 00:00:00.023 ICMP 28.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:58:12.237 00:00:00.025 ICMP 27.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:58:12.375 00:00:00.019 ICMP 30.107.0.1:0 -> 27.0.198.2:0.0 3 252 1 2025-10-16 00:58:12.153 00:00:00.023 ICMP 27.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 00:58:12.158 00:00:00.023 ICMP 27.0.198.2:0 -> 30.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 112268, total packets: 1688, avg bps: 234, avg pps: 0, avg bpp: 66 Time window: 2025-10-15 23:54:52 - 2025-10-16 00:58:45 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0041s User: 0.0014s Wall: 0.0020s flows/second: 87995.9 Runtime: 0.0020s